forked from mirrors/homebox
66e25ba068
* feat: use distroless image and non-root user * fix: remove conflicts after merge * chore: Commen the Dockerfile * chore: Update documentation to reflect image changes * Split docker build in latest and latest-rootless One more job added to the publish Github Action, to build and push TAG-rootless images. * fix: add missing workflow * feat: update documentation about double tags * feat: update readme with double tags --------- Co-authored-by: daniele <daniele@coolbyte.eu>
53 lines
1.5 KiB
Text
53 lines
1.5 KiB
Text
|
|
# Build Nuxt
|
|
FROM node:17-alpine as frontend-builder
|
|
WORKDIR /app
|
|
RUN npm install -g pnpm
|
|
COPY frontend/package.json frontend/pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile --shamefully-hoist
|
|
COPY frontend .
|
|
RUN pnpm build
|
|
|
|
# Build API
|
|
FROM golang:alpine AS builder
|
|
ARG BUILD_TIME
|
|
ARG COMMIT
|
|
ARG VERSION
|
|
RUN apk update && \
|
|
apk upgrade && \
|
|
apk add --update git build-base gcc g++
|
|
|
|
WORKDIR /go/src/app
|
|
COPY ./backend .
|
|
RUN go get -d -v ./...
|
|
RUN rm -rf ./app/api/public
|
|
COPY --from=frontend-builder /app/.output/public ./app/api/static/public
|
|
RUN CGO_ENABLED=0 GOOS=linux go build \
|
|
-ldflags "-s -w -X main.commit=$COMMIT -X main.buildTime=$BUILD_TIME -X main.version=$VERSION" \
|
|
-o /go/bin/api \
|
|
-v ./app/api/*.go && \
|
|
chmod +x /go/bin/api && \
|
|
# create a directory so that we can copy it in the next stage
|
|
mkdir /data
|
|
|
|
# Production Stage
|
|
FROM gcr.io/distroless/static
|
|
|
|
ENV HBOX_MODE=production
|
|
ENV HBOX_STORAGE_DATA=/data/
|
|
ENV HBOX_STORAGE_SQLITE_URL=/data/homebox.db?_fk=1
|
|
|
|
# Copy the binary and the (empty) /data dir and
|
|
# change the ownership to the low-privileged user
|
|
COPY --from=builder --chown=nonroot /go/bin/api /app
|
|
COPY --from=builder --chown=nonroot /data /data
|
|
|
|
LABEL Name=homebox Version=0.0.1
|
|
LABEL org.opencontainers.image.source="https://github.com/hay-kot/homebox"
|
|
EXPOSE 7745
|
|
VOLUME [ "/data" ]
|
|
|
|
# Drop root and run as low-privileged user
|
|
USER nonroot
|
|
ENTRYPOINT [ "/app" ]
|
|
CMD [ "/data/config.yml" ]
|